Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/851ed26e8dd9c713921578e3fa18282ae7f17a08.roa
File:                     851ed26e8dd9c713921578e3fa18282ae7f17a08.roa (raw, json)
Hash identifier:          9bDqVXf3xYUv01tKL+eidLoUSHBhxfFjX5qMSU7Y74U=
Subject key identifier:   91:5C:28:57:76:00:31:D4:17:3F:E2:9F:B0:01:91:6D:40:B0:42:CF
Certificate issuer:       /CN=31742366465ae7b8aabae7fbfcda60083162897c
Certificate serial:       17DC13
Authority key identifier: A2:78:13:93:22:69:C8:86:9B:20:FD:8F:4F:20:96:AB:54:EB:BB:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/31742366465ae7b8aabae7fbfcda60083162897c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/851ed26e8dd9c713921578e3fa18282ae7f17a08.roa
Signing time:             Sun 05 Jun 2022 18:02:02 +0000
ROA not before:           Sun 05 Jun 2022 18:02:02 +0000
ROA not after:            Sat 05 Jun 2027 18:02:02 +0000
asID:                     263702
IP address blocks:        131.221.32.0/22 maxlen: 24
                          138.255.100.0/22 maxlen: 24
                          168.195.128.0/22 maxlen: 24
                          2803:3b80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563667 (0x17dc13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31742366465ae7b8aabae7fbfcda60083162897c
        Validity
            Not Before: Jun  5 18:02:02 2022 GMT
            Not After : Jun  5 18:02:02 2027 GMT
        Subject: CN=851ed26e8dd9c713921578e3fa18282ae7f17a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:30:eb:44:f3:d8:61:9b:28:02:36:ce:de:5d:
                    1f:d2:35:bb:44:09:a3:65:9a:da:ef:11:60:3b:a0:
                    8e:7f:01:b2:66:e3:f8:3e:8e:6b:5c:15:de:9f:55:
                    ea:9a:93:d5:2e:bb:da:cd:5f:df:94:99:f6:96:fb:
                    8f:f1:37:d3:a4:ba:b7:83:64:33:c0:84:7b:4d:89:
                    a1:ec:7b:23:71:58:9a:96:35:70:e4:09:d2:44:77:
                    ce:43:20:7e:52:28:d1:c9:b6:98:70:72:50:b8:01:
                    f8:92:59:d8:f1:dd:ac:db:0e:32:69:5b:ed:dd:1e:
                    87:23:35:f2:a9:12:bb:ba:df:72:e2:2f:93:4f:83:
                    26:d3:b2:7b:0b:f0:6a:b6:b7:09:17:bc:9b:b8:d5:
                    1d:0e:42:65:71:8b:b8:4a:00:48:94:54:f4:9e:29:
                    76:8f:c7:d7:5c:1a:a1:27:c1:90:ae:13:a3:4b:74:
                    ec:47:88:39:e4:fe:e2:4a:5b:2e:6c:a5:50:8e:9c:
                    ef:ae:7f:71:31:7b:53:66:c3:ed:cd:57:aa:65:ba:
                    26:14:73:6a:c1:ba:23:38:2a:31:7a:1c:5e:12:38:
                    83:8b:2f:f3:51:e8:58:ec:6f:a3:c3:63:f1:33:b9:
                    21:9d:9f:f2:d4:e0:1d:e8:4f:c1:01:dd:23:50:13:
                    f9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5C:28:57:76:00:31:D4:17:3F:E2:9F:B0:01:91:6D:40:B0:42:CF
            X509v3 Authority Key Identifier:
                keyid:A2:78:13:93:22:69:C8:86:9B:20:FD:8F:4F:20:96:AB:54:EB:BB:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/31742366465ae7b8aabae7fbfcda60083162897c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/851ed26e8dd9c713921578e3fa18282ae7f17a08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/31742366465ae7b8aabae7fbfcda60083162897c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.32.0/22
                  138.255.100.0/22
                  168.195.128.0/22
                IPv6:
                  2803:3b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:05:00:99:ef:fb:5b:34:05:bf:ca:91:4c:d1:28:d7:d5:2a:
         2e:cb:e9:95:54:1e:7d:47:ba:04:35:ed:db:0a:67:26:d4:4a:
         81:7b:32:c1:98:e4:88:f6:34:08:6a:4a:ee:28:d1:fe:df:cb:
         34:cc:d6:6b:cb:14:5a:95:ea:c6:c3:f7:f9:f0:10:d7:cb:31:
         72:88:76:d7:7f:90:a4:f9:0a:6e:4c:2c:60:26:bc:8f:20:e6:
         da:74:42:3c:d5:0d:04:35:d6:75:ba:2c:03:e5:dd:bb:ce:99:
         49:e7:c1:ed:c0:68:fb:0f:85:f4:0b:ed:c4:a2:7a:cd:12:26:
         54:93:73:e9:af:14:b8:08:66:e9:15:b9:44:d0:69:a6:35:4f:
         77:88:a7:e7:1b:d9:53:54:02:45:43:19:e0:9d:8a:79:02:00:
         31:75:0b:55:29:16:24:e8:a3:a1:ac:c4:00:4f:d2:d1:48:e1:
         27:c4:31:73:d1:29:ba:95:4d:36:cb:0b:79:5a:dd:c4:0f:ba:
         d7:bc:76:ca:64:54:b2:cc:58:94:20:13:70:96:6d:59:82:f2:
         4b:70:19:3d:b2:96:5e:e2:12:3b:67:2f:d9:fd:0f:54:35:6e:
         a8:67:7e:11:4d:d9:a1:a3:c6:77:88:a1:8c:63:6e:43:87:f1:
         ab:54:d4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org